# 查官方最新稳定版（GitHub Releases API，实测回显）
curl -s https://api.github.com/repos/hedgedoc/hedgedoc/releases/latest | grep -m1 '"tag_name"'

  "tag_name": "1.12.0",

# 查官方镜像仓库的版本标签（Quay.io API，实测回显，仅列首行）
curl -s "https://quay.io/api/v1/repository/hedgedoc/hedgedoc/tag/?limit=10&onlyActiveTags=true" | python3 -c "import json,sys; [print(t['name']) for t in json.load(sys.stdin)['tags']]"

latest
1.12.0
debian
1.12.0-debian
alpine
1.12.0-alpine
1.11.1
1.11.1-debian
1.11.1-alpine
1.11.0

# 镜像拉取（实测回显，日志有截断）
docker pull quay.io/hedgedoc/hedgedoc:1.12.0

1.12.0: Pulling from hedgedoc/hedgedoc
cdd62cceb026: Pull complete
...
Digest: sha256:7599c37a67b2b746c2c151edda0a4bd0bfe1e223a97f4e41777756b17e94a357
Status: Downloaded newer image for quay.io/hedgedoc/hedgedoc:1.12.0
quay.io/hedgedoc/hedgedoc:1.12.0

ss -ltn | grep 8132

（无输出即未占用，可放心使用）

# 创建目录结构（实测执行）
mkdir -p /opt/hedgedoc/data/postgres /opt/hedgedoc/data/uploads
ls -l /opt/hedgedoc/

total 8
drwxr-xr-x 3 root root 4096 Oct 21 16:20 ./
drwxr-xr-x 9 root root 4096 Oct 21 16:20 ../
drwxr-xr-x 3 root root 4096 Oct 21 16:28 data/

name: hedgedoc-1.12.0-stack

services:
  database:
    image: postgres:16-alpine
    container_name: hedgedoc-1.12.0-db
    environment:
      - POSTGRES_USER=hedgedoc
      - POSTGRES_PASSWORD=hedgedoc-db-2026
      - POSTGRES_DB=hedgedoc
    volumes:
      - /opt/hedgedoc/data/postgres:/var/lib/postgresql/data
    networks:
      - hedgedoc-net
    restart: unless-stopped

  app:
    image: quay.io/hedgedoc/hedgedoc:1.12.0
    container_name: hedgedoc-1.12.0-app
    environment:
      - CMD_DOMAIN=192.168.146.128
      - CMD_DB_URL=postgres://hedgedoc:hedgedoc-db-2026@database:5432/hedgedoc
      - CMD_ALLOW_ORIGIN=['localhost','192.168.146.128']
      - CMD_SESSION_SECRET=hd-session-secret-2026-quzuo
    volumes:
      - /opt/hedgedoc/data/uploads:/hedgedoc/public/uploads
    ports:
      - "8132:3000"
    networks:
      - hedgedoc-net
    depends_on:
      - database
    restart: unless-stopped

networks:
  hedgedoc-net:
    driver: bridge

cd /opt/hedgedoc
docker compose up -d

[+] Running 3/3
 ✔ Network hedgedoc-1.12.0-stack_hedgedoc-net  Created
 ✔ Container hedgedoc-1.12.0-db  Started
 ✔ Container hedgedoc-1.12.0-app  Started

# 查看运行状态（实测回显）
docker compose ps

NAME                  IMAGE                               COMMAND                   SERVICE    CREATED              STATUS                        PORTS
hedgedoc-1.12.0-app   quay.io/hedgedoc/hedgedoc:1.12.0    "/usr/local/bin/dock…"    app        About a minute ago   Up About a minute (healthy)   0.0.0.0:8132->3000/tcp, [::]:8132->3000/tcp
hedgedoc-1.12.0-db    postgres:16-alpine                  "docker-entrypoint.s…"    database   About a minute ago   Up About a minute             5432/tcp

2026-10-21T16:22:41.642Z info:  Cleaning up notes that should already have been removed. Sorry.
2026-10-21T16:22:41.665Z info:  All migrations performed successfully
2026-10-21T16:22:41.673Z info:  HTTP Server listening at 0.0.0.0:3000

# 健康检查端点（实测回显）
curl -s http://192.168.146.128:8132/_health

{"ready":true}

# 实例状态端点：在线人数、笔记总数、注册用户数（实测回显）
curl -s http://192.168.146.128:8132/status

{"onlineNotes":0,"onlineUsers":0,"distinctOnlineUsers":0,"notesCount":0,"registeredUsers":0,"onlineRegisteredUsers":0,"distinctOnlineRegisteredUsers":0,"isConnectionBusy":false,"connectionSocketQueueLength":0,"isDisconnectBusy":false,"disconnectSocketQueueLength":0}

# 首页 HTTP 状态码（实测回显）
curl -s -o /dev/null -w '%{http_code}\n' http://192.168.146.128:8132/

200

# 注册账号 admin@hedgedoc.local / q1w2e3r4（示例演示账号，实测回显）
curl -s -o /dev/null -w 'POST /register -> %{http_code} redirect=%{redirect_url}\n' \
  -H 'Content-Type: application/x-www-form-urlencoded' \
  --data-urlencode 'email=admin@hedgedoc.local' \
  --data-urlencode 'password=q1w2e3r4' \
  http://192.168.146.128:8132/register

POST /register -> 302 redirect=http://192.168.146.128/

# 登录验证（实测回显）
curl -s -o /dev/null -w 'POST /login -> %{http_code} redirect=%{redirect_url}\n' \
  -H 'Content-Type: application/x-www-form-urlencoded' \
  --data-urlencode 'email=admin@hedgedoc.local' --data-urlencode 'password=q1w2e3r4' \
  http://192.168.146.128:8132/login

POST /login -> 302 redirect=http://192.168.146.128/

# 注册用户数复核（实测回显）
curl -s http://192.168.146.128:8132/status | grep -o '"registeredUsers":[0-9]*'

"registeredUsers":1

# 进入数据库验证表结构（实测回显）
docker compose exec -T database psql -U hedgedoc -d hedgedoc -c '\dt'

             List of relations
 Schema |     Name      | Type  |  Owner
--------+---------------+-------+----------
 public | Authors       | table | hedgedoc
 public | Notes         | table | hedgedoc
 public | Revisions     | table | hedgedoc
 public | SequelizeMeta | table | hedgedoc
 public | Sessions      | table | hedgedoc
 public | Users         | table | hedgedoc
(6 rows)

docker compose exec -T app ls -ld /hedgedoc/public/uploads
ls -ld /opt/hedgedoc/data/uploads

drwxr-xr-x 2 root root 4096 Oct 21 16:28 /hedgedoc/public/uploads
drwxr-xr-x 2 root root 4096 10月 22 00:28 /opt/hedgedoc/data/uploads

    volumes:
      - /opt/hedgedoc/config.json:/hedgedoc/config.json:ro
    environment:
      - CMD_CONFIG_FILE=/hedgedoc/config.json

{
  "domain": "192.168.146.128",
  "sessionSecret": "hd-session-secret-2026-quzuo",
  "loglevel": "info"
}

2026-10-21T16:29:42.034Z warn:  Session secret not set. Using random generated one. Please set `sessionSecret` in your config.json file. All users will be logged out.
2026-10-21T16:29:42.506Z info:  All migrations performed successfully
2026-10-21T16:29:42.511Z info:  HTTP Server listening at 0.0.0.0:3000

# 先建网络与数据库（实测命令形态）
docker network create --driver bridge hedgedoc-1.12.0-stack_hedgedoc-net
docker run -d --name hedgedoc-1.12.0-db \
  --network hedgedoc-1.12.0-stack_hedgedoc-net \
  -e POSTGRES_USER=hedgedoc -e POSTGRES_PASSWORD=hedgedoc-db-2026 -e POSTGRES_DB=hedgedoc \
  -v /opt/hedgedoc/data/postgres:/var/lib/postgresql/data \
  --restart unless-stopped \
  postgres:16-alpine
docker run -d --name hedgedoc-1.12.0-app \
  --network hedgedoc-1.12.0-stack_hedgedoc-net \
  -e CMD_DOMAIN=192.168.146.128 \
  -e CMD_DB_URL='postgres://hedgedoc:hedgedoc-db-2026@database:5432/hedgedoc' \
  -e CMD_SESSION_SECRET=hd-session-secret-2026-quzuo \
  -v /opt/hedgedoc/data/uploads:/hedgedoc/public/uploads \
  -p 8132:3000 \
  --restart unless-stopped \
  quay.io/hedgedoc/hedgedoc:1.12.0

cd /opt/hedgedoc
docker compose ps                # 状态
docker compose logs -f app       # 跟踪应用日志（Ctrl+C 退出）
docker compose restart app       # 重启应用
docker compose stop              # 停止（保留容器）
docker compose start             # 启动
docker compose down              # 删除容器与网络（数据卷/bind mount 不受影响）

cd /opt/hedgedoc
# 1. 备份数据库（升级前必做，见 10.3）
docker compose exec -T database pg_dump -U hedgedoc -d hedgedoc > /opt/hedgedoc/data/backup-$(date +%F).sql
# 2. 拉新镜像（以 1.12.0 为例，实测回显，日志节选）
docker compose pull

[+] Running 2/2
 ✔ app Pulled
 ✔ database Pulled

# 3. 重建应用容器（数据库不动）
docker compose up -d

 Container hedgedoc-1.12.0-app Recreate
 Container hedgedoc-1.12.0-app Recreated
 Container hedgedoc-1.12.0-app Starting
 Container hedgedoc-1.12.0-app Started

# 4. 健康复验（实测回显）
curl -s http://192.168.146.128:8132/_health

{"ready":true}

# 备份：导出全库 SQL（实测产物 9928 字节，空库初始态）
docker compose exec -T database pg_dump -U hedgedoc -d hedgedoc > /opt/hedgedoc/data/hedgedoc-$(date +%F).sql

head -6 /opt/hedgedoc/data/hedgedoc-2026-10-22.sql

--
-- PostgreSQL database dump
--

\restrict nHoBT9JV9QSCsgKeKDHJKngNVzNoBSDOmNRrQYfn0OglCVAeFA4bhRWMcYhAgta

-- Dumped from database version 16.15

# 恢复：空库中导入
cat /opt/hedgedoc/data/hedgedoc-2026-10-22.sql | docker compose exec -T database psql -U hedgedoc -d hedgedoc

# 实例实时状态（在线协作用户/笔记数/注册数），可接监控采集
curl -s http://192.168.146.128:8132/status

{"onlineNotes":0,"onlineUsers":0,"distinctOnlineUsers":0,"notesCount":1,"registeredUsers":1,"onlineRegisteredUsers":0,"distinctOnlineRegisteredUsers":0,"isConnectionBusy":false,"connectionSocketQueueLength":0,"isDisconnectBusy":false,"disconnectSocketQueueLength":0}

2026-10-21T16:27:17.375Z warn:  Database cannot be reached. Try 1 of 30. (SequelizeConnectionError: getaddrinfo EAI_AGAIN database)

2026-10-21T16:27:36.443Z info:  All migrations performed successfully
2026-10-21T16:27:36.450Z info:  HTTP Server listening at 0.0.0.0:3000